AI Company Registry (EN)

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:38 PM UTC
• Version:
  1.1.0-en2

Overview

This skill is a static agent directory with no executable permissions, though some activation phrases are broader than ideal.

This appears safe to install as a reference directory. Consider narrowing the trigger phrases and review the named dependent skills separately if your environment auto-enables dependencies or lets them perform recruitment, audit, or operational actions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger list includes broad, generic phrases such as 'agent status', 'agent onboarding', and 'C-suite directory' that are likely to match ordinary user conversation unrelated to this registry skill. This can cause unintended invocation, context hijacking, or incorrect routing of user requests, especially in environments with many overlapping skills and agent-management workflows.

VirusTotal

63/63 vendors flagged this skill as clean.